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new Case 


ICO consultation on the draft right of access 
guidance 


Q1 


Does the draft guidance cover the relevant issues about the right of access? 
O) Yes 

© No 

©) Unsure / don't know 

If no or unsure/don’t know, what other issues would you like to be covered in it? 


- What is covered under supplementary information when responding to a SAR? - When using a 
processor to process personal data, would the processor respond to their part of the SAR, or would the 
controller receive the information from the processor to respond direct to the requester? - Is a child 
considered over the age of 13? - What about duplicated data? If data is duplicated in back up, would the 
duplicated data have to be provided in the response to the SAR? - Examples of legal privilege and 
litigation privilege would be appreciated, and perhaps an example of what is not legal privilege. 


Q2 


Does the draft guidance contain the right level of detail? 


() Yes 

© No 

©) Unsure / don't know 

If no or unsure/don't know, in what areas should there be more detail within the draft 
guidance? 

See above in Q1 


Q3 


Does the draft guidance contain enough examples? 
() Yes 

© No 

C) Unsure / don't know 

If no or unsure/don’t know, please provide any examples that think should be included in 
the draft guidance. 

See above in Q1 


Q4 


We have found that data protection professionals often struggle with applying and 
defining ‘manifestly 

unfounded or excessive’ subject access requests. We would like to include a wide 

range of examples 

from a variety of sectors to help you. Please provide some examples of manifestly 
unfounded and excessive 

requests below (if applicable). 


Q5 


Q6 


Q7 


On a scale of 1-5 how useful is the draft guidance? 


3 es 
1-Notatall 2-Slightly Moderately 
useful useful useful 
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Why have you given this score? 
See above at Q1 


4 — Very 
useful 


( ) 


5 — Extremely 


useful 
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To what extent do you agree that the draft guidance is clear and easy to understand? 


Strongly Neither agree 
disagree Disagree nor disagree 
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Agree 


© 


Strongly 


agree 


ff ` 


W 


Q8 


Q9 


Please provide any further comments or suggestions you may have about the draft 
guidance. 


Are you answering as: 

( D An individual acting in a private capacity (eg someone providing their views as a member of the public) 
C) An individual acting in a professional capacity 

© On behalf of an organisation 

() Other 

Please specify the name of your organisation: 

BMW Financial Sevices (GB) Limited & Alphabet (GB) Limited 

What sector are you from: 

Financial Services 


Q10 How did you find out about this survey? 
©) ICO Twitter account 
(|) ICO Facebook account 
©) ICO LinkedIn account 
© ICO website 
©) ICO newsletter 
C) ICO staff member 
C) Colleague 
©) Personal/work Twitter account 
(`) Personal/work Facebook account 
() Personal/work LinkedIn account 
O Other 
If other please specify: 


